CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-104745 | HIGH | 8.1 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Esca… | — |
|
2026-10-16 |
| CVE-2026-111389 | HIGH | 7.7 | Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injecti… | — |
|
2026-10-16 |
| CVE-2026-111382 | HIGH | 8.8 | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaT… | — |
|
2026-10-16 |
| CVE-2026-111381 | HIGH | 7.3 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v… | — |
|
2026-10-16 |
| CVE-2026-111380 | HIGH | 8.8 | FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_ma… | — |
|
2026-10-16 |
| CVE-2026-111379 | HIGH | 7.3 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v… | — |
|
2026-10-16 |
| CVE-2026-111378 | HIGH | 7.5 | FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in pars… | — |
|
2026-10-16 |
| CVE-2026-92629 | HIGH | 7.3 | A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distribut… | — |
|
2026-10-16 |
| CVE-2026-84823 | HIGH | 7.1 | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based… | — |
|
2026-10-16 |
| CVE-2026-75941 | HIGH | 8.0 | A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusivel… | — |
|
2026-10-16 |
| CVE-2026-111210 | HIGH | 7.3 | A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection o… | — |
|
2026-10-16 |
| CVE-2025-61624 | HIGH | — | FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that ma… | — |
|
2026-10-16 |
| CVE-2026-111369 | HIGH | 7.1 | ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:… | — |
|
2026-10-15 |
| CVE-2026-111366 | HIGH | 7.2 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows departmen… | — |
|
2026-10-15 |
| CVE-2026-111359 | HIGH | 7.1 | CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows aut… | — |
|
2026-10-15 |
| CVE-2026-111356 | HIGH | 7.4 | MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, a… | — |
|
2026-10-15 |
| CVE-2026-111352 | HIGH | 8.8 | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController … | — |
|
2026-10-15 |
| CVE-2026-111312 | HIGH | 7.7 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /a… | — |
|
2026-10-15 |
| CVE-2026-111282 | HIGH | 8.2 | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer… | — |
|
2026-10-15 |
| CVE-2026-111280 | HIGH | 7.4 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea()… | — |
|
2026-10-15 |